Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File:                     ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier:          BrWGkp1lu1tc2EvYCqdk6isOb7r1poUNdBs7O66gE/Q=
Subject key identifier:   85:75:4A:5F:1B:14:63:99:0D:DF:AC:AB:BF:B3:92:9C:7D:08:2F:47
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer:       /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial:       01A10B828C6E47512B115314E48C2D5BD0C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number:          1616
Signing time:             Mon 05 Oct 2026 10:01:07 +0000
Manifest this update:     Mon 05 Oct 2026 10:01:07 +0000
Manifest next update:     Tue 06 Oct 2026 10:01:07 +0000
Files and hashes:         1: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: nLusL70vAci8Bni3VC7Ur8YaHB41aRn6QWhIT1YcbLg=)
                          2: uD5eUDrQgXD4j74OWplFHBQd_hs.roa (hash: 1h/Ex6tXdCvENtcBMUtZd+XOEB+wQCjfinmzLg0hRdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:82:8c:6e:47:51:2b:11:53:14:e4:8c:2d:5b:d0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
        Validity
            Not Before: Oct  5 10:01:07 2026 GMT
            Not After : Oct  6 10:01:07 2026 GMT
        Subject: CN=85754a5f1b1463990ddfacabbfb3929c7d082f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:80:ff:fe:b6:83:06:e1:47:99:03:8e:f9:
                    69:99:63:35:4f:b4:82:d3:63:f2:ec:29:a7:6f:70:
                    43:63:48:e2:f9:a2:89:37:6e:c2:f0:16:a1:64:ac:
                    62:43:c4:25:b6:b0:16:a9:52:75:6d:87:13:2f:58:
                    13:86:64:5c:2a:1b:17:26:8d:d6:85:94:18:bb:ed:
                    56:ae:9b:96:72:ad:e4:70:08:4e:e8:cb:de:8a:14:
                    82:7a:dd:22:00:70:10:e0:c3:2e:e3:e5:4e:b3:d6:
                    6d:85:8a:ff:d2:fb:46:db:60:97:a2:29:3d:33:0d:
                    00:27:01:f6:02:05:7d:27:ce:90:22:1a:1b:cd:91:
                    06:a8:81:f5:c6:f3:c5:d6:5d:b8:45:34:f6:e0:03:
                    19:64:64:2c:38:ad:28:54:2e:92:d8:2e:a9:c0:fe:
                    44:74:49:a9:79:0f:e4:f5:d7:ee:15:81:75:0c:1d:
                    25:da:b8:b7:26:26:c8:3b:d8:66:00:fe:80:a2:f4:
                    c3:b6:88:6c:e2:66:a8:0c:b4:74:89:d8:bb:83:c1:
                    25:97:74:b8:5f:cd:d9:b2:a9:30:5b:39:c5:96:c6:
                    9d:88:2a:0c:5d:79:ab:15:45:7b:d1:7f:ac:ed:c2:
                    12:22:56:db:da:c7:36:f5:45:42:ec:9c:e6:4b:30:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:75:4A:5F:1B:14:63:99:0D:DF:AC:AB:BF:B3:92:9C:7D:08:2F:47
            X509v3 Authority Key Identifier:
                keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e6:b7:ab:16:ac:f9:3c:0b:a1:c7:45:18:28:b3:f9:7e:5c:
         bf:06:7b:92:68:95:a4:df:b0:da:78:93:b2:9c:cb:a2:49:56:
         4b:d5:97:50:8d:4b:98:eb:64:5b:e7:06:67:b3:af:8b:ca:24:
         14:c6:f7:f3:bf:7b:e5:1c:ec:c5:73:dd:e4:11:fd:27:65:44:
         f2:d6:dd:fd:78:62:a0:f3:e5:73:03:3d:b1:20:41:9a:ee:28:
         e9:96:ad:b4:5a:77:cc:90:46:f2:7f:5a:a0:1b:8e:bc:de:74:
         0a:ef:97:8e:3c:0d:e3:cd:a8:14:25:8e:08:ba:f6:19:ad:47:
         71:28:5a:cf:4a:27:05:64:25:2e:a4:be:4e:3f:e9:08:cd:04:
         5e:99:d3:71:1d:e0:30:84:20:1e:cb:00:6b:61:59:dc:1b:73:
         36:28:89:8e:2f:7b:14:4e:a7:59:6d:f3:b8:ab:84:8c:6f:33:
         6b:04:90:1e:6d:f0:53:67:7e:42:83:7e:3b:0c:81:47:0e:a5:
         07:78:d9:0c:be:5a:ca:3b:c9:65:93:91:29:10:46:db:8b:dd:
         c9:68:fc:e0:ff:c5:87:2a:88:ca:95:cc:ac:05:0f:55:2b:3e:
         75:fa:87:ab:fa:91:a6:1c:7b:0f:e6:4a:ec:12:0c:2a:cc:52:
         d9:98:77:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:15:33 2026 by rpki-client